Configuring Interfaces

Configure the Small Office Appliance interfaces in the Interfaces tab in the Security GatewayClosed Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources. window, then add a VLAN and configure a LAN Switch.

  1. From the Devices window, double-click the Small Office Appliance object.

    The Security Gateway window opens.

  2. Select the Interfaces tab.

  3. Select Use the following settings.

    The interface settings open.

  4. Select the interface and click Edit.

    The Edit window opens.

  5. From the IP Assignment section, configure the IP address of the interface:

    1. Select Static IP.

    2. Enter the IP Address and Subnet Mask for the interface.

  6. Select Enable Hotspot authentication to allow

    1. In the DHCP section, select Enabled.

    2. In DHCP IP range, enter the range of IP addresses that can be assigned to the DHCP clients.

    3. In Exclude IP range, enter the range of IP addresses that are not assigned to the DHCP clients.

    4. To configure an IP Relay agent, select Relay.

    5. Enter the IP address for the IP Relay agent.

  8. To configure the advanced parameters for the interface:

    1. To assign a MAC address to the interface, select Override MAC Address.

    2. Enter the new MAC address value.

    3. From Link speed/Duplex, select the bandwidth for the interface.

  9. Click OK.

    The Edit window closes.

  10. Optional: In the Switch section > LAN Switch is active, click Activate to configure a LAN switch (see Configuring a LAN Switch).

  11. To configure the MTU (Maximum Transmission Unit) for all the interfaces that are not part of the LAN switch:

    • In the Advanced section, enter the new MTU value.

  12. To enable the configured connection, select the interface and click Enable.

You can add a new VLAN to a configured interface.

  1. From the Devices window, double-click the Small Office Appliance object.

    The Security Gateway window opens.

  2. Select the Interfaces tab.

  3. Click New > New VLAN.

    The Add VLAN window opens.

  4. From Interface, select the interface to which the new VLAN is added.

  5. Enter these parameters from the new VLAN:

    • VLAN number

    • IP address

    • Subnet Mask

  6. To configure the DHCP settings for the new VLAN:

    1. From the DHCP section, select Enabled.

    2. In DHCP IP range, enter the range of IP addresses that can be assigned to the DHCP clients.

    3. In DHCP Exclude IP range, enter the range of IP addresses that are not assigned to the DHCP clients.

    4. To configure an IP Relay agent for the new VLAN, select Relay.

    5. Enter the IP address for the IP relay.

  7. Click OK.

    The new VLAN is added to the interface.

Configure the Small Office Appliance as a LAN switch in the Interfaces tab in the Security Gateway window.

  1. From the Devices window, double-click the Small Office Appliance.

    The Security Gateway window opens.

  2. Select the Interfaces tab.

  3. From the Switch section, click Activate.

    The Edit Switch window opens.

  4. In the IP Assignment section, enter the IP address and Subnet Mask of the LAN switch.

  5. To add an interface to the LAN switch:

    1. In the Interfaces section, select an interface from the Available Interfaces list.

    2. Click Add.

    1. From the DHCP section, select Enabled.

    2. In DHCP IP range, enter the range of IP addresses that can be assigned to the DHCP clients.

    3. In DHCP Exclude IP range, enter the range of IP addresses that are not assigned to the DHCP clients.

    4. To configure an IP Relay agent for the new VLAN, select Relay.

    5. Enter the IP address for the IP Relay agent.

  7. To assign a MAC address to the interface, in the Advanced section select Override MAC Address and enter the MAC address.

  8. Click OK.

    The Edit Switch window closes and the switch is configured and activated.

  9. The Switch section allows you to manage the LAN switch.

    • To disable the interfaces in the LAN switch, clear Enable Interfaces.

    • To deactivate the LAN switch, click Deactivate.

    Note - When the LAN switch is deactivated, the settings of all interfaces in the LAN switch are erased.

  10. Click OK.